This policy explains what personal data WadataHR collects, why we collect it, how we use it, and your rights. We have written it in plain language because we believe you deserve to understand exactly what happens to your data.
WadataHR is operated by Wadata HR Solutions Limited, a company registered in Nigeria with its principal place of business in Awka, Anambra State.
When this policy refers to "WadataHR", "we", "us", or "our", we mean Wadata HR Solutions Limited. When it refers to "you", we mean the business owner, administrator, or individual accessing our platform.
You can contact us at: hello@wadatahr.com
We collect the following categories of personal and business data:
Account Information: Name, email address, business name, CAC number, Tax Identification Number (TIN), and state of operation.
Worker Data: Full names, email addresses, phone numbers, job titles, salary information, bank account details, Pension Fund Administrator (PFA) name and PIN, RSA numbers, NHF numbers, dates of birth, and addresses of employees registered on the platform.
Payroll Data: Monthly salary calculations, statutory deductions (PAYE, pension, NHF, NSITF), net pay figures, and payroll run history.
Compliance Data: Records of statutory remittances including PAYE, pension, NSITF, and NHF remittance history.
Contract Data: Employment contract details, signing dates, and digital signature records.
Payment Data: Subscription billing information processed through Flutterwave. We do not store card details - these are held by Flutterwave in accordance with PCI DSS standards.
Technical Data: IP addresses, browser type, device information, and usage logs for security and performance monitoring.
Early Access Enquiries: The early access form has since closed, but if you previously completed it on our website, we collected your name, work email address, company name, and job role, together with the answers you gave about how you currently run payroll and which HR and compliance tasks you find difficult. You did not need an account with us to submit that form, and submitting it did not make you a customer. One question was a free-text box; we only asked for a description of the problem, not your employees' personal details.
Named members of the WadataHR team can view workspace data. This includes names, contact details, staff records, hiring activity, payroll totals, and subscription status. We do this when providing support, keeping the service secure, and handling billing.
Access is limited to specifically authorised team members. It is read only, and every view is logged with who, which workspace, and when.
Our team never signs in as customers. We never use workspace data for marketing, and we never share it with third parties beyond the subprocessors already listed in this policy.
If you have questions about access to your data, email hello@wadatahr.com.
We use your data to:
We do not sell your data to third parties. We do not use your data for advertising purposes.
Under the Nigeria Data Protection Act 2023 (NDPA), we process your data on the following legal bases:
Contractual necessity - to provide the services you have subscribed to.
Legal obligation - to maintain records required by Nigerian tax and labour law.
Legitimate interests - to improve our platform, prevent fraud, and see which features people use (product analytics, section 10). Product analytics is part of how we run the app, so it is always on. It never includes payroll figures, bank details, or CV content. If you have concerns, email hello@wadatahr.com and we will reply within 14 working days.
Consent - where you have explicitly opted in to optional features, and where you previously submitted the early access form. You gave that information voluntarily and you can withdraw it at any time by emailing hello@wadatahr.com, after which we will delete your enquiry and stop contacting you.
When you enter worker data into WadataHR, you are acting as the data controller for that information and your workers are the data subjects. This means you are responsible for:
WadataHR acts as a data processor on your behalf. We process worker data only as instructed by you through the platform and in accordance with this policy. Workers may also contact us directly at hello@wadatahr.com if they have concerns about how their data is being processed.
We do not sell, rent, or share your data with third parties for commercial purposes. We share data only in the following limited circumstances:
Flutterwave - payment processing for subscriptions. Flutterwave's Privacy Policy is available at flutterwave.com/ng/privacy-policy.
Resend - email delivery for payslips, contracts, and compliance notifications. Only the recipient email address and email content are shared.
Cloud hosting provider - our managed database, authentication, and file storage. We will name our current provider and hosting region on request; email hello@wadatahr.com.
Cloud spreadsheet service - early access form responses you submitted are stored in a hosted spreadsheet so we can review and follow up on them. The form has since closed, but those responses remain in the spreadsheet. This service may store data outside Nigeria. We will name the provider on request; email hello@wadatahr.com.
AI language-model providers (Anthropic and Groq) - Anthropic (Claude) is our main AI provider. To summarise a candidate, we send Anthropic the CV text with the job title, job description and the role's must-haves; CV text is only ever sent to Anthropic. To draft a job post, we send the short role description you type, with your company name and state, to Anthropic, and to Groq only if Anthropic is unavailable. We send this data only to get the generated text back.
File storage (S3-compatible object storage) - CVs, company logos, handbooks, and employee documents are stored in S3-compatible object storage.
Legal requirements - we may disclose data if required to do so by Nigerian law, court order, or a legitimate request from a regulatory authority.
Business transfers - if WadataHR is acquired or merges with another company, your data may transfer as part of that transaction. We will notify you before this happens.
Your data is stored on secure, access-controlled servers operated by a managed cloud hosting provider. We implement the following security measures:
No system is completely immune to security risks. If we become aware of a breach that affects your data, we will notify you promptly.
We retain your account data for as long as your account is active. If you close your account, we will delete your data within 90 days unless we are required by law to retain it for longer.
Under the Nigeria Data Protection Act 2023, you have the right to:
To exercise any of these rights, contact us at hello@wadatahr.com. We will respond within 14 working days.
For complaints, you may also contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
WadataHR uses essential cookies and analytics:
You can change your choice for wadatahr.com at any time: change your cookie choice. Declining removes the analytics cookies already set.
You can disable cookies in your browser settings but the app may not function without them.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the date at the top of this page. Your continued use of WadataHR after changes are posted means you accept the updated policy.
If you have questions about this policy or how we handle your data, contact us: